Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/347BC088DA8B11EFA1A02461762E951A.roa
File: 347BC088DA8B11EFA1A02461762E951A.roa (raw, json)
Hash identifier: V3YKYd+87YvpRzCgU8pT5Zit+RRAcKjLfFxnljccZ98=
Subject key identifier: 22:05:94:C3:1E:B6:60:D8:38:7F:4B:F3:B6:56:B4:23:97:52:9C:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 011052
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/347BC088DA8B11EFA1A02461762E951A.roa
Signing time: Fri 24 Jan 2025 19:41:29 +0000
ROA not before: Fri 24 Jan 2025 19:41:25 +0000
ROA not after: Tue 25 Feb 2025 19:41:25 +0000
asID: 44559
IP address blocks: 156.246.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69714 (0x11052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 24 19:41:25 2025 GMT
Not After : Feb 25 19:41:25 2025 GMT
Subject: CN=6793ece9-205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:70:23:dc:3c:73:04:cc:c9:07:63:ab:e0:46:
43:20:b1:56:83:58:64:6e:09:14:3e:05:ee:5e:79:
fa:49:b9:ba:32:b6:2f:64:f5:85:29:cd:d0:b5:a4:
9d:f0:f6:70:e0:ca:63:8e:28:09:6e:b1:fb:a3:e8:
d0:b5:2e:90:53:b4:25:20:db:12:2c:61:f2:4a:27:
6a:45:87:6b:9f:dc:7e:bf:16:d2:2b:f5:91:4c:40:
9b:37:63:14:98:f6:32:76:ef:5a:82:06:2d:78:c2:
ef:bd:a0:95:0e:f4:c0:ce:0e:44:82:dc:bf:a5:da:
cc:e3:a5:55:85:66:48:92:c7:1a:43:d4:57:43:54:
8c:8e:4c:70:35:23:74:5c:d8:ec:54:5a:8c:48:24:
00:da:59:63:f3:f7:7a:48:91:82:0d:31:6b:fe:cb:
f8:e5:f1:1b:7b:95:bc:d9:68:20:c1:c4:24:b9:af:
77:d2:19:14:8c:df:5d:23:aa:a8:65:b6:a5:89:d1:
9b:f0:0c:86:02:4a:c8:aa:04:b6:b1:a6:f3:5c:33:
31:71:36:14:63:dc:70:80:44:ea:36:8b:b0:5f:08:
fc:41:b0:10:76:82:35:cd:70:98:c0:66:e8:c1:3e:
50:58:9a:9e:16:f1:07:f3:7f:fb:85:53:18:a5:ce:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:94:C3:1E:B6:60:D8:38:7F:4B:F3:B6:56:B4:23:97:52:9C:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/347BC088DA8B11EFA1A02461762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1c:83:69:f5:6c:70:61:3a:d0:74:99:ef:95:e6:20:e7:41:
5c:f3:85:c0:9a:b8:11:14:b4:04:79:47:d4:41:08:24:16:33:
92:89:fc:93:f5:80:d0:67:91:1e:e9:ca:0b:ea:f0:b1:49:5c:
3e:a7:9e:10:89:6a:e5:45:3d:c5:47:2d:ff:55:22:ad:45:c6:
d6:fe:ff:3e:eb:b9:12:6c:1e:75:b5:c6:59:70:a8:79:45:9d:
1b:ae:b1:a2:26:e4:fc:49:05:10:e8:a2:1f:16:7f:7f:7b:93:
5e:03:69:dc:db:ca:f7:a9:07:af:86:60:fd:9c:40:09:5b:65:
87:5d:63:2e:9d:4c:7b:17:67:3c:23:b8:40:e0:12:0f:70:9e:
b2:03:14:10:0d:ae:fc:c4:0d:9b:30:dd:23:1a:76:69:08:9f:
b0:22:e6:8e:d7:86:64:63:6c:e5:de:37:03:bc:1a:ea:3f:ed:
b1:fd:61:43:93:ab:d0:92:19:51:c7:e7:f7:78:67:df:ca:bb:
f8:4d:87:b7:23:ab:5d:94:59:03:bc:e5:9c:f6:38:ae:10:2c:
8e:34:af:4b:d8:e1:52:30:23:f9:44:9e:00:ae:e1:68:0e:f8:
1c:1a:a4:e1:49:44:dc:81:c4:ba:d1:96:69:c9:51:1c:0f:ab:
db:c1:ef:53
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDARBSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMTI0MTk0MTI1WhcNMjUwMjI1MTk0MTI1WjAYMRYw
FAYDVQQDEw02NzkzZWNlOS0yMDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8nAj3DxzBMzJB2Or4EZDILFWg1hkbgkUPgXuXnn6Sbm6MrYvZPWFKc3Q
taSd8PZw4MpjjigJbrH7o+jQtS6QU7QlINsSLGHySidqRYdrn9x+vxbSK/WRTECb
N2MUmPYydu9aggYteMLvvaCVDvTAzg5Egty/pdrM46VVhWZIkscaQ9RXQ1SMjkxw
NSN0XNjsVFqMSCQA2llj8/d6SJGCDTFr/sv45fEbe5W82WggwcQkua930hkUjN9d
I6qoZbalidGb8AyGAkrIqgS2sabzXDMxcTYUY9xwgETqNouwXwj8QbAQdoI1zXCY
wGbowT5QWJqeFvEH83/7hVMYpc7ZYQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCIF
lMMetmDYOH9L87ZWtCOXUpytMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNDdCQzA4OERBOEIxMUVGQTFBMDI0NjE3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPbPMA0GCSqGSIb3DQEBCwUA
A4IBAQALHINp9WxwYTrQdJnvleYg50Fc84XAmrgRFLQEeUfUQQgkFjOSifyT9YDQ
Z5Ee6coL6vCxSVw+p54QiWrlRT3FRy3/VSKtRcbW/v8+67kSbB51tcZZcKh5RZ0b
rrGiJuT8SQUQ6KIfFn9/e5NeA2nc28r3qQevhmD9nEAJW2WHXWMunUx7F2c8I7hA
4BIPcJ6yAxQQDa78xA2bMN0jGnZpCJ+wIuaO14ZkY2zl3jcDvBrqP+2x/WFDk6vQ
khlRx+f3eGffyrv4TYe3I6tdlFkDvOWc9jiuECyONK9L2OFSMCP5RJ4AruFoDvgc
GqThSUTcgcS60ZZpyVEcD6vbwe9T
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:22:16 2025 by rpki-client